cloud-trezor-suite[.]netlify[.]app

This domain represents a high-risk brand impersonation threat specifically targeting Trezor cryptocurrency wallet users. The phishing site masquerades as the legitimate Trezor setup portal, aiming to steal recovery seeds and login credentials from unsuspecting victims. With an active status and a convincing page title referencing "Trézor.io/Start® | Starting Up Your Device - Trézor®", the site exploits trust in the Trezor brand to harvest sensitive information.

VirusTotal flagged this domain with 13 out of 95 security vendors marking it as malicious, and it appears on 3 security blocklists. The domain was created on June 15, 2026, and is hosted via Netlify, resolving to IP address 35.157.26.135. The SSL certificate is issued by DigiCert Inc using the DigiCert Global G2 TLS RSA SHA256 2020 CA1, which may lend a false sense of legitimacy. These technical indicators collectively confirm the domain's malicious intent and active operation.

Users are strongly advised not to visit the site or enter any personal information. If you have already interacted with it, immediately change your Trezor credentials and enable two-factor authentication. Run a full security scan on your device and consider transferring funds to a new wallet generated offline. Report the domain to Netlify and security authorities to help takedown efforts. Always verify URLs by typing them manually and bookmarking official sites like trezor.io.